Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

dasinfomedia vulnerabilities

18 published CVEs name dasinfomedia among the affected products.

All 18 in the listAtom feed of new CVEs
Published CVEs
18
Last 12 months
2
Critical
2
Known exploited
0

Critical 2High 12Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20244
  2. 202512
  3. 20262

Newest CVEs

  • CVE-2025-31643

    WordPress WPCHURCH plugin <= 2.7.0 - Privilege Escalation Vulnerability

    Dasinfomedia · WPCHURCH

    High8.8
  • CVE-2025-31642

    WordPress WPCHURCH plugin <= 2.7.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Dasinfomedia · WPCHURCH

    High7.1
  • CVE-2025-7049

    WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

    dasinfomedia · WPGYM - Wordpress Gym Management System

    High8.8
  • CVE-2025-6079

    School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload

    dasinfomedia · School Management System for Wordpress

    High8.8
  • CVE-2025-6080

    WPGYM <= 67.7.0 - Missing Authorization to Admin Account Creation

    dasinfomedia · WPGYM - Wordpress Gym Management System

    High8.8
  • CVE-2025-3671

    WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update

    dasinfomedia · WPGYM - Wordpress Gym Management System

    High8.8
  • CVE-2024-12612

    School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection

    dasinfomedia · School Management System for Wordpress

    High7.5
  • CVE-2025-3740

    School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update

    dasinfomedia · School Management System for Wordpress

    High8.8
  • CVE-2025-7442

    WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection

    dasinfomedia · WPGYM - Wordpress Gym Management System

    High7.5
  • CVE-2024-9658

    School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation

    dasinfomedia · School Management System for Wordpress

    High8.8

Products with the most CVEs

  1. School Management System for Wordpress10
  2. WPGYM - Wordpress Gym Management System6
  3. WPCHURCH2

Most common weaknesses

  1. CWE-434 Unrestricted file upload4
  2. CWE-89 SQL injection4
  3. CWE-862 Missing authorization3
  4. CWE-22 Path traversal2
  5. CWE-269 Improper privilege management2
  6. CWE-266 1
  7. CWE-288 1
  8. CWE-306 Missing authentication for a critical function1
  9. CWE-639 Authorization bypass through a user-controlled key (IDOR)1
  10. CWE-79 Cross-site scripting (XSS)1